ipset -N myBlackhole-4 hash:net family inet
ipset -N myBlackhole-6 hash:net family inet6
ipset -A myBlackhole-6 2001:468:cc0::/48
ipset -A myBlackhole-4 198.38.16.0/20
iptables -A INPUT -m set --match-set myBlackhole-4 src -j DROP
ip6tables -A INPUT -m set --match-set myBlackhole-6 src -j DROP